$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft File: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json) Hash identifier: WtB9BqnNlB9iYsQTA6Y0Stfofu76qtOZMHK2At8baxc= Subject key identifier: 1B:76:13:42:4D:FF:C3:5D:4D:91:C4:A7:97:AA:30:F4:FF:AB:44:72 Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Certificate serial: 5FBD648229C464A9E6C1D8CF5BA7144B1816F691 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft Manifest number: EB Signing time: Sat 24 Oct 2026 00:55:16 +0000 Manifest this update: Sat 24 Oct 2026 00:50:16 +0000 Manifest next update: Sun 25 Oct 2026 02:51:16 +0000 Files and hashes: 1: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: dydiI2uZ+bIXsgvu8NXKAV7Ra6beZNKl5OBJTCp+Ls4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 02:51:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:bd:64:82:29:c4:64:a9:e6:c1:d8:cf:5b:a7:14:4b:18:16:f6:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Validity Not Before: Oct 24 00:50:16 2026 GMT Not After : Oct 25 02:51:16 2026 GMT Subject: CN=1B7613424DFFC35D4D91C4A797AA30F4FFAB4472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0a:02:2d:54:57:31:47:4d:89:ac:82:a0:c9: 51:9e:27:6d:2b:7d:34:02:60:c4:bd:db:75:48:13: 40:fe:5c:3a:71:2c:8e:4a:8a:db:10:24:fe:31:64: e9:4a:14:81:fa:9e:2c:8b:36:52:90:47:56:3d:6b: 89:3c:21:b3:80:26:58:8a:2b:60:ea:82:d2:4d:3c: 1f:ac:0d:e7:61:90:e5:ee:db:56:ea:01:5d:e7:36: 6d:93:cf:d5:fd:0d:cb:a0:43:65:53:a7:e5:a2:21: 3d:68:a4:22:ad:a3:6d:9e:38:75:21:23:23:81:07: 40:96:5a:6a:fa:40:c9:c9:b7:dc:d3:4c:df:78:5c: d1:9a:bd:6b:e3:9e:58:e3:39:01:20:ba:e3:6b:5e: 9e:a7:29:97:30:9d:09:46:3a:d8:a4:1a:b7:19:a2: ee:7d:37:f9:af:47:b5:ab:4a:e2:09:34:db:cb:de: 5d:8b:03:0a:e4:0f:9e:df:97:79:52:65:57:04:79: 10:64:ec:89:0c:5f:b0:aa:cf:8d:e6:89:df:92:61: d9:49:ab:ae:f9:68:1d:cd:6e:31:d9:ca:66:84:58: 31:98:65:60:50:12:08:05:10:5c:b0:02:fb:d4:2a: 84:0e:81:ef:1a:44:a7:b9:9b:48:c2:3b:65:38:3e: 20:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:76:13:42:4D:FF:C3:5D:4D:91:C4:A7:97:AA:30:F4:FF:AB:44:72 X509v3 Authority Key Identifier: keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:77:4e:23:0f:f1:1b:9a:7f:2c:8f:91:ba:f5:9d:b8:5f:f4: 0a:a7:2b:86:af:92:c6:2e:20:c3:ec:7e:24:57:06:82:2b:d2: 9d:e8:a6:2a:ce:1d:a0:d1:0f:f9:df:99:07:35:bd:fc:e5:85: c6:a4:39:92:c2:d4:d5:33:8d:70:f6:ee:b8:9c:68:32:4e:8d: 64:f9:67:0e:4e:94:46:fe:7f:5a:ba:4d:68:41:2d:36:7d:d7: 84:ef:de:b6:30:86:f9:76:ec:9e:67:d3:26:74:1f:f2:f6:60: 89:04:38:3c:79:b3:5d:d3:10:ab:a1:d7:df:bc:76:be:c7:77: f0:b8:05:75:d6:f2:49:11:79:4a:f6:c2:f7:36:bf:b9:d0:d5: b8:87:10:d9:10:8a:51:c6:15:af:0c:3e:f0:ea:44:4e:9a:16: b7:ba:bb:97:43:90:a0:80:8d:0c:a9:9b:59:c9:2f:ab:7f:ef: ff:8d:6a:68:8d:05:83:87:9c:08:22:44:21:bc:8e:0b:66:72: 9d:64:c4:c3:5d:be:86:cc:9b:7d:a0:d2:c1:5e:37:25:bd:ef: ab:4b:fd:68:14:d6:47:e9:07:49:95:e1:2e:20:07:84:43:95: 4d:dd:37:a7:1b:44:a6:e7:1e:63:5f:fd:14:ac:71:ed:f7:1a: 37:96:d1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX71kginEZKnmwdjPW6cUSxgW9pEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQwNjUx QjBDRjM4QjAeFw0yNjEwMjQwMDUwMTZaFw0yNjEwMjUwMjUxMTZaMDMxMTAvBgNV BAMTKDFCNzYxMzQyNERGRkMzNUQ0RDkxQzRBNzk3QUEzMEY0RkZBQjQ0NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPCgItVFcxR02JrIKgyVGeJ20r fTQCYMS923VIE0D+XDpxLI5KitsQJP4xZOlKFIH6niyLNlKQR1Y9a4k8IbOAJliK K2DqgtJNPB+sDedhkOXu21bqAV3nNm2Tz9X9DcugQ2VTp+WiIT1opCKto22eOHUh IyOBB0CWWmr6QMnJt9zTTN94XNGavWvjnljjOQEguuNrXp6nKZcwnQlGOtikGrcZ ou59N/mvR7WrSuIJNNvL3l2LAwrkD57fl3lSZVcEeRBk7IkMX7Cqz43mid+SYdlJ q675aB3NbjHZymaEWDGYZWBQEggFEFywAvvUKoQOge8aRKe5m0jCO2U4PiCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG3YTQk3/w11NkcSnl6ow9P+rRHIwHwYDVR0j BBgwFoAUjwSbQ91hKFxs3IGTh8rQZRsM84swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiMjkzNzgtNDVmMC00OWQzLWE2YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNE RDYxMjg1QzZDREM4MTkzODdDQUQwNjUxQjBDRjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjA0OUI0M0RENjEyODVDNkNEQzgxOTM4N0NBRDA2NTFCMENG MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQw NjUxQjBDRjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFB3TiMP8RuafyyPkbr1nbhf9AqnK4avksYu IMPsfiRXBoIr0p3opirOHaDRD/nfmQc1vfzlhcakOZLC1NUzjXD27ricaDJOjWT5 Zw5OlEb+f1q6TWhBLTZ914Tv3rYwhvl27J5n0yZ0H/L2YIkEODx5s13TEKuh19+8 dr7Hd/C4BXXW8kkReUr2wvc2v7nQ1biHENkQilHGFa8MPvDqRE6aFre6u5dDkKCA jQypm1nJL6t/7/+NamiNBYOHnAgiRCG8jgtmcp1kxMNdvobMm32g0sFeNyW976tL /WgU1kfpB0mV4S4gB4RDlU3dN6cbRKbnHmNf/RSsce33GjeW0eU= -----END CERTIFICATE-----Generated at Sat Oct 24 10:13:57 2026 by rpki-client